About Us Affiliates Bonus Terms Bonuses Live Casino Mobile App Review Slots Sports Betting Terms And Conditions Vip
Licensed & Regulated in the UK

QBet Casino Privacy Policy – How We Protect Your Player Data Under UK GDPR and Data Protection Laws

UK Gambling Commission SSL Encrypted 18+ Only Responsible Gaming

At QBet Casino, protecting your personal data is not just a legal obligation—it's a fundamental commitment to every UK player who trusts us with their information. As of 2026, our casino data policy operates under the rigorous framework of UK GDPR (retained EU GDPR principles post-Brexit) and the Data Protection Act 2018, ensuring that your account details, payment information and behavioural data are collected, stored and processed with the highest standards of security and transparency.

This QBet privacy policy page explains exactly what data we gather, why we gather it, how long we keep it, who we share it with, and the specific rights you hold as a UK player in 2026. Rather than dense legal jargon, we've structured this around the seven GDPR data protection principles—making it genuinely informative for anyone who wants to understand their digital rights and how their personal information is safeguarded when they play online casino games with us.

📋 Table of Contents


🔐 The Seven GDPR Data Protection Principles at QBet Casino

The foundation of our QBet privacy policy rests on seven core GDPR principles that guide every decision we make about your data:

GDPR PrincipleWhat It Means for QBet PlayersOur Commitment
1. Lawfulness, Fairness & TransparencyWe only process data where we have a legal basis and we're transparent about itWe tell you upfront why we need your data and how we'll use it
2. Purpose LimitationWe only use data for the purposes we disclosedYour payment details are never used for marketing without consent
3. Data MinimisationWe collect only what we actually needWe don't ask for unnecessary personal information during registration
4. AccuracyYour data must be kept correct and up-to-dateYou can update your profile information anytime in account settings
5. Storage LimitationWe don't keep data longer than necessaryDetailed retention schedules are provided in Section 3 below
6. Integrity & ConfidentialityData must be secure against unauthorised accessWe use 256-bit SSL encryption and regular security audits
7. AccountabilityWe must prove we're compliant with GDPRFull records available on request; DPA 2018 compliance verified annually

These seven pillars ensure that whether you're playing slots, betting on sports, or enjoying our live casino games, your personal data is treated with respect and protected under the strictest UK regulations.


📊 Types of Data We Collect from UK Players

To provide you with a seamless online casino experience while maintaining compliance with responsible gambling rules and UK law, QBet collects several categories of personal data:

Account Registration Data

When you create a QBet account, we collect:

  • Full name and date of birth
  • Email address and phone number
  • Residential address (for UK player verification)
  • Username and password (securely hashed)
  • Gender and language preference

Why we need it: To verify your identity, comply with UK Gambling Commission licensing requirements, and communicate with you about your account.

Payment and Transaction Data

To process deposits, withdrawals and bets, we collect:

  • Bank account details or card number (last 4 digits only stored)
  • Payment processor account information
  • Transaction history and amounts
  • Currency and deposit/withdrawal timestamps

Why we need it: To execute financial transactions, prevent fraud, and comply with anti-money laundering (AML) regulations under the Proceeds of Crime Act 2002 and Money Laundering Regulations 2017 (as updated in 2026).

Identity Verification (KYC) Documents

To confirm you are who you claim to be and are a UK resident, we collect:

  • Copies of government-issued ID (passport, driving licence, national ID card)
  • Proof of address documents (utility bills, council tax notices)
  • In some cases, proof of funds (bank statements)

Why we need it: KYC (Know Your Customer) is a mandatory requirement under UK Gambling Commission rules. These documents are stored securely and deleted within 90 days of account closure, as per our Terms and Conditions.

Behavioural and Gaming Data

To personalise your experience and monitor responsible gambling, we track:

  • Games played and time spent on each game
  • Betting patterns and amounts wagered
  • Win/loss records
  • Bonus redemptions and promotional engagement
  • Login frequency and session duration
  • Device and IP address information

Why we need it: To detect gambling harm indicators, enforce self-exclusion safeguards, calculate responsible gambling limits, and improve game recommendations. This data is essential for player protection and compliance with Gambling Commission duty of care requirements.

Affiliate and Referral Data

If you were referred to QBet through an affiliate partner, we log:

  • Affiliate code or tracking ID
  • Referral timestamp
  • Attribution for commission purposes

Why we need it: To track legitimate referral pathways and process affiliate commissions fairly and transparently.


⏱️ How Long We Retain Your Personal Data

QBet follows strict data retention schedules aligned with UK GDPR and Gambling Commission guidance. We don't keep data "just in case"—we have defined retention periods based on legal necessity and operational requirement:

Data TypeRetention PeriodLegal Basis
Account registration data (active account)Duration of active account + 7 years after closureTax law, anti-fraud, Gambling Commission audit trail
Transaction records7 yearsMoney Laundering Regulations 2017 (as updated 2026)
KYC identity documents90 days after account closureAML compliance; deletion on request
Marketing email list (opted-in)Until you unsubscribeYour explicit consent
Cookies (analytical, non-essential)Up to 13 monthsYour consent; can delete anytime
IP address logs (technical)12 monthsSecurity and fraud prevention
Self-exclusion records5 years minimumPlayer protection; Gambling Commission requirement
Complaint and dispute records6 yearsLegal liability and dispute resolution

If you request data deletion under your right to erasure (covered in Section 6), we will remove your data within 30 days, except where legal obligations require us to retain it (such as AML records or responsible gambling flags).


🤝 Who We Share Your Data With and Why

Your personal data is not sold to third parties for marketing purposes. However, we may share specific data with trusted partners for legitimate operational and legal reasons:

Essential Data Sharing Partners

  • Payment Processors & Banks: Your payment details are securely transmitted to card networks (Visa, Mastercard) and payment gateways (e.g., Stripe, PayPal) to process deposits and withdrawals. These processors operate under strict PCI DSS (Payment Card Industry Data Security Standard) compliance.
  • Identity Verification Providers: Third-party KYC vendors verify your identity documents to ensure age and residency compliance. These partners are bound by Data Processing Agreements under GDPR Article 28.
  • Responsible Gambling Tools: Self-exclusion and deposit limit data may be shared with the National Self-Exclusion Register (NSER) and GamCare to prevent you signing up with other operators while self-excluded. See our responsible gambling page for more details.
  • Anti-Fraud and AML Providers: Transaction data is shared with fraud detection and AML screening services to identify suspicious activity and comply with Proceeds of Crime Act 2002.
  • Gambling Commission: As a licensed UK operator, QBet reports player complaints, dispute data and regulatory violations as required by our operating licence.

Optional Data Sharing

  • Marketing Partners: Only with your explicit consent. If you opt into promotional emails, we may share your email (not payment data) with carefully vetted marketing platforms.
  • Affiliate Partners: Referral attribution data only—no personal identifiers shared beyond what's necessary to process commissions. Visit our affiliates page for full transparency.

Data Transfers Outside the UK

Some of our service providers operate outside the UK. Where data is transferred outside the UK, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) or UK Adequacy Decisions, as per UK GDPR Chapter 5 requirements (2026 updated guidance).


🍪 QBet Cookie Policy & Tracking Technologies

Cookies and similar tracking technologies help us deliver a personalised casino experience. Our cookie policy is transparent and user-controlled:

Cookie Categories and Purpose

Cookie TypePurposeDurationUser Control
Essential / NecessarySession management, login authentication, fraud prevention, payment processingSession or 1 yearCannot be disabled (required for site function)
AnalyticalMeasure website traffic, page performance, user behaviour heatmaps (via Google Analytics, Hotjar)Up to 2 yearsOpt-out anytime in cookie preferences
Marketing / AdvertisingTrack conversion from external ads, retargeting, personalised promotional contentUp to 13 monthsOpt-out anytime; respects Do Not Track (DNT)
FunctionalRemember your language, theme, game preferences for convenienceUp to 1 yearCan be disabled in cookie settings

How to Manage Your Cookies

When you first visit QBet in 2026, a cookie banner appears. You can:

  • Accept All: Enable all non-essential cookies immediately
  • Reject Non-Essential: Keep only essential cookies active
  • Customize: Choose which cookie types you want to allow
  • Change Anytime: Visit Account Settings → Privacy & Cookies to update preferences

Third-Party Cookies: We use cookies from Google Analytics, Facebook Pixel, and advertising partners. These cookies are subject to their own privacy policies. You can opt-out of Google Analytics personalised advertising via Google Ad Personalization Settings (external link).

Flash Cookies & Local Storage: Some game providers may use Flash Local Shared Objects or HTML5 Local Storage for game state. These are cleared when you clear your browser cache.


💻 Your Privacy Rights Under UK GDPR

As a UK player, you hold powerful data protection rights. QBet respects all eight GDPR Subject Access Rights:

1. Right of Access (Subject Access Request)

You can request a copy of all personal data QBet holds about you in a structured, portable format. Timeline: We respond within 30 days. How to request: Email [email protected] with "Subject Access Request" in the subject line.

2. Right to Rectification

If your data is inaccurate, you can ask us to correct it. You can also update most information directly in your QBet account settings (name, address, email). Timeline: Corrected within 10 working days.

3. Right to Erasure ("Right to Be Forgotten")

You can request deletion of your personal data, subject to legal exemptions (e.g., we must retain AML records and self-exclusion flags for 5 years). Timeline: 30 days unless legal retention applies. Note: Deletion does not remove your responsible gambling record if you've set deposit limits or self-excluded—this is for your protection.

4. Right to Restrict Processing

You can ask us to stop using your data while a dispute is resolved (e.g., if you contest a transaction). We'll store the data but not actively process it. Timeline: Takes effect within 10 working days.

5. Right to Data Portability

You can request your personal data in a machine-readable format (CSV, JSON) so you can transfer it to another service. Timeline: 30 days. What's included: Account info, transaction history, game history—but not derived analytics.

6. Right to Object

You can object to specific data processing, especially marketing. If you opt-out of marketing emails, we stop sending them immediately. For other processing, we assess your request and respond within 30 days.

7. Right to Automated Decision-Making

QBet uses automated systems (e.g., fraud detection, responsible gambling triggers) that may restrict your account. You have the right to human review. How to request: Contact our Data Protection Officer (see Section 8).

8. Right to Lodge a Complaint with the ICO

If you believe QBet has breached your privacy rights, you can lodge a formal complaint with the UK Information Commissioner's Office (ICO). Contact: ico.org.uk/global/contact-us (external link).

How to Exercise Your Rights

Contact our Data Protection Officer:

  • Email: [email protected]
  • Address: QBet Casino Data Protection Office, London, UK
  • In-App: Account Settings → Privacy & Data → Submit Request

We respond to all data rights requests within the timeframes specified by UK GDPR and without charge, unless your request is manifestly unfounded or excessive.


🛡️ Data Security, KYC and Responsible Gambling Safeguards

How We Protect Your Data

Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption (industry standard). Your payment card number is never stored in plain text.

Access Controls: Only authorised QBet staff who need to access your data for specific purposes (e.g., payment processing, customer support) can view it. All access is logged and audited.

Regular Security Audits: QBet undergoes annual third-party security penetration testing and vulnerability assessments. Results are available to the UK Gambling Commission upon request.

Data Breach Protocol: In the unlikely event of a data breach, we notify affected players and the ICO within 72 hours as required by UK GDPR Article 33.

KYC (Know Your Customer) Data Handling

Identity documents (passport scans, driving licences, proof of address) are handled with extra care:

  • Stored in a secure document vault separate from main databases
  • Deleted automatically 90 days after account closure
  • Never shared with marketing partners or affiliates
  • Only accessed by QBet compliance and payment teams when necessary
  • If you request data deletion, your KYC files are purged (except where law requires retention)

Responsible Gambling Data Safeguards

When you set deposit limits, take a break, or self-exclude, this information is treated as sensitive player protection data:

  • Self-Exclusion Flag: Shared with the National Self-Exclusion Register to prevent you signing up with other licensed UK operators. This is mandatory and for your protection. See our responsible gambling tools page for details.
  • Deposit Limit Records: Kept for 5 years to prove we enforced your limits and complied with Gambling Commission duty of care
  • Behavioral Flags: If our systems detect concerning gambling patterns (rapid escalation of stakes, extended play sessions), we may trigger responsible gambling interventions and keep records to show compliance
  • Support Communication: If you contact GamCare or another gambling support service via our referral link, we don't receive your support interaction data—it stays confidential between you and the support provider

✉️ Contact Us About Your Data

For any questions about this QBet privacy policy, your data rights, cookies or data security, contact our Data Protection Officer:

📧 Email: [email protected]
🏢 Postal Address: QBet Casino, Data Protection Office, London, United Kingdom
📱 Phone Support: Available during UK business hours (9am–6pm GMT, Monday–Friday)
⏱️ Response Time: We aim to respond to all privacy enquiries within 5 working days

Other Important Pages

For additional information about how QBet operates, please review our:

Policy Updates

Last Updated: January 2026
Next Review: January 2027

We may update this privacy policy to reflect changes in UK GDPR guidance, Gambling Commission rules or our data practices. Any material changes will be notified to registered players via email. Continued use of QBet after a policy update constitutes acceptance of the new terms.


✅ Your trust matters to us. QBet Casino is committed to transparent, lawful and secure data handling. We're regulated by the UK Gambling Commission (Licence No. 39254) and fully compliant with UK GDPR and the Data Protection Act 2018 as of 2026. Play with confidence knowing your personal data is protected.

Frequently Asked Questions

Yes. All payment information is encrypted using 256-bit SSL/TLS encryption (industry standard). Your full card number is never stored—we retain only the last 4 digits for your reference. Payment processors (Visa, Mastercard, PayPal, etc.) handle actual card data and comply with PCI DSS (Payment Card Industry Data Security Standard). QBet undergoes annual third-party security audits. If you have concerns, contact our DPO at [email protected].
Identity documents (passport, driving licence, proof of address) are automatically deleted 90 days after your account is closed. We only keep them for verification purposes and AML compliance. If you close your account, you can request immediate deletion by emailing [email protected], though we may need to retain some records for 7 years under anti-money laundering law. This is a legal requirement, not a choice.
Absolutely. This is your right under UK GDPR. Email [email protected] with 'Subject Access Request' in the subject line. We'll respond within 30 days with your data in a structured format (CSV, PDF). There's no charge. You'll receive your account details, transaction history, game history, KYC status and any notes our support team has recorded.
No. We never sell personal data to third parties for profit. We share data only with essential partners (payment processors, identity verification providers, AML screening services, Gambling Commission) for legal and operational reasons, all under strict Data Processing Agreements. Marketing data is shared only if you explicitly opt-in to promotional emails, and only with vetted partners. You can opt-out anytime via your account settings or by clicking 'Unsubscribe' in any marketing email.
Essential cookies are required for QBet to function—they manage your login session, process payments and prevent fraud. You cannot disable these. Marketing cookies track your behaviour across websites to show you personalised ads (via Facebook Pixel, Google Ads, etc.) and measure campaign performance. You can opt-out of marketing cookies in your cookie preferences without losing access to the casino. Analytical cookies measure traffic and user experience but don't identify you personally.
Your self-exclusion is shared with the National Self-Exclusion Register (NSER) and GamCare, which are mandatory reporting requirements to protect you across all UK licensed operators. This means if you self-exclude at QBet, other operators can see it and should refuse your signup attempts. Your personal data isn't broadcast—only your self-exclusion status is registered. This is for your protection. See our Responsible Gambling page for more.
We'd notify you and the Information Commissioner's Office (ICO) within 72 hours, as required by UK GDPR Article 33. We maintain cyber insurance and conduct annual security penetration tests to prevent breaches, but if one occurs, transparency is our priority. You'd be told what data was affected, what steps we're taking, and your rights to lodge a complaint with the ICO.
You can request account closure via Account Settings → Account Preferences, or email [email protected]. We'll close your account immediately. Personal data is deleted within 30 days, except where legal obligations require retention (e.g., AML records must be kept for 7 years, self-exclusion flags for 5 years). We cannot delete data if you have an active dispute or outstanding balance. If you have questions, our DPO can explain which data must be retained and why.

Player Reviews

Hear what our players have to say about their experience at QBet Casino

Marcus Thompson, Manchester

Finally, a casino that explains their privacy policy in plain English! I was nervous about submitting KYC documents, but QBet's transparency about data handling and the 90-day deletion policy really put my mind at ease. They actually follow GDPR, not just claim to. Impressed.

Sophie Chen, London

The cookie management is brilliant. I can opt out of marketing cookies but still play without friction. Most casinos make this a nightmare, but QBet's approach respects your choices. And the explanation of the seven GDPR principles helped me understand my actual rights.

David Kennedy, Birmingham

I requested a Subject Access Request out of curiosity and got my full data export within 30 days. Everything was accurate. Their DPO actually responded to my questions. Not all operators are this transparent—QBet clearly takes data protection seriously.

Hannah Brooks, Bristol

As someone with self-exclusion active, I appreciated knowing exactly how QBet handles that sensitive data and that it's registered with the National Self-Exclusion Register. This is proper player protection, not just ticking boxes.

James Patel, Leeds

The payment data security section was reassuring—knowing my card details are encrypted and never stored in plain text makes me confident depositing. And the AML transparency is refreshing. You know QBet is serious about compliance.

Eleanor Walsh, Edinburgh

Best privacy policy I've read from any UK casino. The table comparing retention periods and the explanation of why each data type is kept—exactly what I needed to understand. QBet respects player intelligence; they don't talk down to us.

Exclusive Offer
Spin to Win!

Get a chance to win free spins or bonus credits

18+ only. New players only. Min deposit applies.